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CLAIMS 

1 . A method for efficiently searching a hash table containing a plurality of ranges, 
the method comprising: 

performing one or more preliminary range checks on at least one target value, 
each preliminary range check generating an output value having a value dependent on 
whether the target value is included in a predefined range of values associated with the 
preliminary range check; 

combining signature information with the output values generated by the prelimi- 
nary range checks to generate a modified signature; 

applying a predetermined fimction to the modified signature to derive an index 
that references a hash-table entry in the hash table; 

locating a searchable data structure associated with the hash-table entry refer- 
enced by the index, the searchable data structure comprising one or more search nodes, at 
least one of the search nodes configured to store one or more target- value ranges associ- 
ated with the target value; and 

searching the search nodes in the searchable data structure until a matching search 
node is fovind whose stored target-value ranges associated with the target value include 
the target value. 

2. The method of claim 1 , wherein the searchable data structure is a linked list and 
the search nodes in the searchable data structure are linked-list entries. 

3. The method of claim 1 , wherein the output values generated by the preliminary 
range checks are concatenated with the signature information to generate the modified 
signature. 

4. The method of claim 1, wherein the step of searching the search nodes in the 
searchable data structure fiirther comprises: 



25 

H:\l 12\025\0534\PROSECUT\0534.doc 09/08/03 3:35 PM 



PATENT 
112025-0534 
Seq. No. 7448; CPOL 280265 

searching the search nodes until a matching search node is found that not only 
stores target-value ranges including their associated target values, but also stores the sig- 
nature information. 

5. The method of claim 4, wherein the signature information and the target value are 
obtained from predetermined fields in a packet's network headers or from other packet- 
related information. 

6. The method of claim 5, further comprising: 

extracting data-flow mformation from the matching search node, the data-flow 
information being used to route the packet. 

7. The method of claim 1 , wherein the step of applying a predetermined ftinction to 
the modified signature generates one or more output bits, and a predetermined set of the 
output bits are masked to derive the index. 

8. An intermediate network node configured to perform flow-based processing, the 
intermediate network node comprising: 

a network interface for receiving a data packet; 

a memory adapted to store a hash table organized as a plurality of indexed hash- 
table entries, each hash-table entry associated with a corresponding linked list and each 
linked list containing one or more linked-list entries; and 

a system controller configured to efficiently search the hash table, the system 
controller: 

obtaining signature information and at least one target value from a 
set of predetermined fields in the received packet's network headers; 

performing one or more preliminary range checks on at least one 
of the target values, each preliminary range check generating an output 
value having a value dependent on whether the target value is included in 
a predefined range of values associated with the preliminary range check; 

26 

H:\l 12\025\0534\PROSECim0534.doc 09/08/03 3:35 PM 



PATENT 
112025-0534 
Seq. No. 7448; CPOL 280265 

combining the signature information with the output values gener- 
ated by the preliminary range checks to generate a modified signature; 

applying a predetermined function to the modified signature to de- 
rive an index that references a hash-table entry in the hash table; 

locating a linked list associated with the hash-table entry refer- 
enced by the index, the Imked list comprising one or more linked-list en- 
tries, each entry configured to store at least one target-value range associ- 
ated with the target value; and 

searching linked-list entries in the linked list until a matching 
linked-hst entry is found whose stored target-value ranges associated with 
the target value include the target value. 

9. The intermediate network node of claim 8, further comprising a processor, 
wherein the memory is further adapted to store instructions for execution by the 

processor, at least a portion of the instructions defining a router operating system con- 
figured to route the received packet based on a data flow associated with the received 
packet. 

10. The intermediate network node of claim 9, wherein the system controller identi- 
fies data-flow information stored in the matching linked-list entry and transfers the data- 
flow information to the router operating system which routes the received packet m ac- 
cordance with the data-flow information. 

1 1 . The intermediate network node of claim 8, wherein the system controller searches 
the linked-list entries until a matching linked-list entry is found that not only stores tar- 
get-value ranges including their associated target values, but also stores the signature m- 
formation. 

12. The intermediate network node of claim 1 1 , further comprising a processor, 
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wherein the memory is further adapted to store instructions for execution by the 
processor, at least a portion of the instructions defining a router operating system con- 
figured to route the received packet based on a data flow associated with the received 
packet. 

13. The intermediate network node of claim 12, wherein the system controller identi- 
fies data-flow information stored in the matching linked-list entry and transfers the data- 
flow information to the router operating system which routes the received packet in ac- 
cordance with the data-flow information. 

14. An apparatus for efficiently searching a hash table containing a plurality of 
ranges, the method comprising: 

means for performing one or more preliminary range checks on at least one target 
value, each preliminary range check generating an output value having a value dependent 
on whether the target value is included in a predefined range of values associated with the 
preliminary range check; 

means for combining signature information with the output values generated by 
the preliminary range checks to generate a modified signature; 

means for applying a predetermined fimction to the modified signature to derive 
an index that references a hash-table entry in the hash table; 

means for locating a searchable data structure associated with the hash-table entry 
referenced by the index, the searchable data structure comprising one or more search 
nodes, at least one of the search nodes configured to store one or more target-value 
ranges associated with the target value; and 

means for searching the search nodes in the searchable data structure until a 
matching search node is found whose stored target-value ranges associated with the target 
value include the target value. 

15. The apparatus of claim 14, wherein the searchable data structure is a linked list 
and the search nodes in the searchable data structure are linked-list entries. 
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16. The apparatus of claim 14, wherein the output values generated by the prelimi- 
nary range checks are concatenated with the signature information to generate the modi- 
fied signature. 

1 7. The apparatus of claim 14, further comprising: 

means for searching the search nodes in the searchable data structure until a 
matching search node is found that stores target-value ranges including their associated 
target values and also stores the signature information. 

18. The apparatus of claim 17, wherein the signature information and the target val- 
ues are obtained from predetermined fields in a packet's network headers or from other 
packet-related information. 

1 9. The apparatus of claim 1 8, further comprising: 

means for extracting data-flow information from the matching search node, the 
data-flow information being used to route the packet. 

20. The apparatus of claim 14, wherein the means for applying a predetermined func- 
tion to the modified signature generates one or more output bits and a predetermined set 
of the output bits are masked to derive the index. 

21. A computer-readable media including instructions for execution by a processor, 
the instructions for a method of efficiently searching a hash table comprising a plurality 
of ranges, the method comprising: 

performing one or more preliminary range checks on at least one target value, 
each preliminary range check generating an output value having a value dependent on 
whether the target value is included in a predefined range of values associated with the 
preliminary range check; 

combining signature information with the output values generated by the prelimi- 
nary range checks to generate a modified signature; 

29 

H:\l 12\025\0534\PROSECim0534.doc 09/08/03 3:35 PM 



PATENT 
112025-0534 
Seq. No. 7448; CPOL 280265 

applying a predetermined function to the modified signature to derive an index 
that references a hash-table entry in the hash table; 

locating a searchable data structure associated with the hash-table entry refer- 
enced by the index, the searchable data structure comprising one or more search nodes, at 
least one of the search nodes configured to store one or more target-value ranges associ- 
ated with the target value; and 

searching the search nodes in the searchable data structure until a matching search 
node is found whose stored target-value ranges associated with the target value include 
the target value. 
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